Описание
A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | DNE | |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needs-triage] |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE | trusty was needs-triage |
| upstream | needs-triage | |
| xenial | DNE |
Показывать по
10
Ссылки на источники
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
CVSS3: 6.1
nvd
почти 7 лет назад
A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.
CVSS3: 6.1
debian
почти 7 лет назад
A carefully crafted URL could trigger an XSS vulnerability on Apache J ...
CVSS3: 6.1
fstec
около 7 лет назад
Уязвимость программного обеспечения на основе JSP технологий Apache JSPWiki, позволяющая нарушителю осуществить межсайтовую сценарную атаку
4.3 Medium
CVSS2
6.1 Medium
CVSS3